April 2013 - Xymon - Xymon mailman web

graphing problem
by Phil.Crooker＠orix.com.au 18 Apr '13

18 Apr '13

I'm a graphing newbie and can't get the graph to work. Could anyone please help? This is to measure internet latency, the test is called "internet". This is running over four hosts, so we should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. many thanks, Phil I've got the following data coming in from an ext script every 10 mintues: google : 0.15 businessspectator : 1.28 bloomberg : 0.05 ------------------------------------- I set this up as a gauge graph. Here is one of the entries: <ds> <name> google </name> <type> GAUGE </type> <minimal_heartbeat> 600 </minimal_heartbeat> <min> NaN </min> <max> NaN </max>  <last_ds> U </last_ds> <value> 0.0000000000e+00 </value> <unknown_sec> 172 </unknown_sec> </ds> ---------------------------------------------------- Here are the config files. in xymonserver.cfg: I added this to the GRAPHS string: internet=ncv and put in this line after that NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" ------------------------------------- graphs.cfg: [internet] TITLE Internet Latency YAXIS Seconds DEF:google=internet.rrd:google:GAUGE DEF:businessspectator=internet.rrd:businessspectator:GAUGE DEF:bloomberg=internet.rrd:bloomberg:GAUGE LINE2:google#00CCCC:Inode cache LINE2:businessspectator#FF0000:Dentry cache LINE2:bloomberg#00FF00:In COMMENT:Time to load home page in seconds.\n

2 2

CLI Event Report
by everett.vernon＠gmail.com 18 Apr '13

18 Apr '13

Hi guys I know this has been asked before, and probably answered, but I can't seem to find it on the list. I would like to pull a list of past events for the last 24 hours (or 72 for Monday) of events using the CLI. Management is looking for the incident list, and pulling it out manually from the GUI every day offends my sense of laziness. (I believe it is morally wrong for you to do any repetitive task the computer is perfectly capable of doing for itself.) Thanks Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton

2 2

graphing problem
by Phil.Crooker＠orix.com.au 17 Apr '13

17 Apr '13

>> should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. > First, it sometimes takes a few cycles for RRD entries to show up. Although I suspect this is normally for non-GAUGE data sources. This has been running for several days. > Check your RRD file permissions and make sure that Xymon can write to them. If they contain nothing but NaNs, you could delete them and see if they get recreated. Yes they are recreated. >> in xymonserver.cfg: >> I added this to the GRAPHS string: internet=ncv >> and put in this line after that >> NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" > Good. Also, you might need to add "internet=ncv" to TEST2RRD. It is now in both GRAPHS and TEST2RRD and has gone through several cycles... Probably something simple I missed out. thanks.

3 2

clustered xymonserver using XYMONSERVERS
by Rolands＠logicaltech.com.au 17 Apr '13

17 Apr '13

Hi, Just want to let anyone out there know how I worked out a cheap and easy xymon server "cluster" I really have no idea if this is the correct way of doing this but it works flawlessly for me. I had 1 xymon server, pxym01, running Solaris 10 and xymon 4.3.10 I wanted to get another "backup server" if this one fails. (it has some disk issues which resolves in recoverable errors at the moment) This is a brief step by step how I configured a second xymon server. * Install Solaris 10 on new server (pxym02) * Install all pre-requisite for running a Xymon server, this should be the same as the existing pxym01. * Change ALL xymon-clients to use XYMONSERVERS Vi /usr/local/xymon/client/etc/xymonclient.cfg XYMSRV="0.0.0.0" # IP address of the Xymon server XYMSERVERS="192.168.1.1 192.168.1.2" # IP of multiple Xymon servers. XYMSRV must be "0.0.0.0". * copy /etc/apache2/httpd.conf from pxym01 to pxym02 and change it to suit pxym02, you need f.ex. change the port and ip-address * copy /usr/local/xymon directory from pxym01 to pxym02 (this obviously requires same arch and OS on both servers) * change /usr/local/xymon/server/etc/hosts on both xymon servers 192.168.1.1 pxym01 # bbd http://pxym01:8082/xymon/xymon.html 192.168.1.2 pxym02 # bbd http://pxym02:8083/xymon/xymon.html * change /usr/local/xymon/server/etc/xymonserver.cfg on pxym02, change ip and xymonserver name * start apache2 * start xymon on pxym02 As we copied the whole xymon directory all history is there, graphs and the lot. One funny thing I noticed, is it a bug? The CPU test also checks the time difference and if the time diffs more than 10secs between xymonserver and xymonclient the test goes yellow. In the list of XYMSERVERS="192.168.1.1 192.168.1.2" it will check with the first one in the list not the second?? In this example if I take down 192.168.1.1 the cpu time diff test goes yellow on 192.168.1.2. If I swap them around XYMSERVERS="192.168.1.2 192.168.1.1" it works again. Have fun. - Roland Soderstrom

1 0

client-local.cfg backticks expression help
by spah＠syntec.co.uk 17 Apr '13

17 Apr '13

Using Jeremy's amazing example here http://lists.xymon.com/pipermail/xymon/2013-January/036615.html I'm trying to do something a little simpler... Basically, if the line contains "debug:" replace it and the rest of the line with "DEBUG LINE DETECTED AND REPLACED". Otherwise just output the log normally. Here is what I have tried and the part within the backticks works fine (if I exclude the exec part that hangs my bash session) from a command line to produce the name of the file: log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; C=$(sed 's/debug:.*/DEBUG LINE DETECTED AND REPLACED/' $F > $T); echo $T`:1024 log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed 's/debug:.*/DEBUG LINE DETECTED AND REPLACED/' $F > $T; echo $T`:1024 log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed "s/debug:.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T; echo $T`:1024 log:`F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed "s/debug:.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T; echo $T`:1024 But /usr/share/xymon-client/logs/xymonclient.log gets this: sh: -c: line 0: unexpected EOF while looking for matching `'' sh: -c: line 1: syntax error: unexpected end of file Or this: sh: -c: line 0: unexpected EOF while looking for matching `"' sh: -c: line 1: syntax error: unexpected end of file ...depending on whether I use single or double quotes in the sed expression. Kind regards, SebA

2 1

DNS error
by troy＠athabascau.ca 17 Apr '13

17 Apr '13

This has been happening on many, but not all, of my http tests since 23:49:51 last night. cheers, Troy ----- Original Message ----- From: "Troy Adams" <troy at athabascau.ca> To: "xymon" <xymon at xymon.com> Sent: Tuesday, April 16, 2013 10:40:57 AM GMT -07:00 US/Canada Mountain Subject: DNS error A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! /Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

3 3

DNS error
by troy＠athabascau.ca 16 Apr '13

16 Apr '13

A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! / Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ---

2 2

TIME=*:2101:0729 DURATION>5 and MAIL MACRO
by bakgat8＠hotmail.com 16 Apr '13

16 Apr '13

Can anyone shed any light for me? larry:/xymondev/L:=> date -d "Tue Apr 16 22:01:23 EDT 2013" +%s 1366164083 this works: [[note *** Match with '$XCD' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD larry:/xymondev/-L:=> gelaptopp conn --duration=6 --time=1366164083 < 00009651 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009651 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009651 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009651 2013-04-16 22:01:23 *** Match with '$XCD' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this works -- moved only the duration part to be on the line within the HOST paragraph [[*** Match with '$XCD DURATION>5' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00009878 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009878 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009878 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009878 2013-04-16 22:01:23 *** Match with '$XCD DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) If I try and move the TIME as well it fails to match. Why? $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00010046 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00010046 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00010046 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00010046 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this does not work either ... $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 00013510 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00013510 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00013510 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00013510 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)

1 0

Scaling
by bferrell＠baywinds.org 16 Apr '13

16 Apr '13

Hi all, I've been doing systems monitoring for a very long time now... I was early on with BB, used HP openview back in day day, blah blah. Anyway, recently I've been told that in very large installations (multi thousands of devices) things like zabbix are the only thing(s) that will do. What are the groups thoughts on this? What ARE the scaling limits of xymon and can they be overcome somehow?

7 11

Monitoring Multiple Cores
by g.fer.ordas＠unicyber.co.uk 16 Apr '13

16 Apr '13

Hi This a topic I am complete sure was been already discussed, but I have been for hours around the web and I cannot find what I am looking for.... I am trying to monitor every cpu within the server rather than the load average, and I wonder if there anything already done rather than re-inventing the wheel again? maybe something which is already done in relation to monitoring multiple cores? Many thanks to all of you.

4 5